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Abstract 

An efficient algorithm is presented for factoring polynomials over an 
algebraic extension field. The extension field is defined by a polynomial 
ring modulo a maximal ideal. If the ideal is given by its Grobner basis, no 
extra Grobner basis computation is needed for factoring a polynomial over 
the extension field. We will only use linear algebra to get a polynomial 
over the base field by a generic linear map, and this polynomial will be 
factorized over the base field. From these factors, the factorization of the 
polynomial over the extension field can be obtained. The algorithm has 
been implemented and the experiments show that our algorithm is very 
efficient. 

1 Introduction 

Factorization of polynomials over algebraic extension fields has been widely 
investigated and there are polynomial-time algorithms for factoring multivariate 
polynomial over algebraic number field [1, 2, 6, 13, 16, 21]. However, all the 
existing algorithms for factoring polynomials over successive algebraic extension 
field are not so efficient. 

Factorization over algebraic extension fields is needed for irreducible decom- 
position of algebraic variety by using characteristic set method [25, 26]. In 
[22, 23], Wang and Lin proposed a very good algorithm for factoring multivari- 
ate polynomials over algebraic fields obtained from successive extensions of the 
filed of rational numbers. This problem has been further investigated by Li and 
Yuan in [17, 27]. Li's algorithm decomposes ascending chain into irreducible 
ones directly and Yuan's algorithm follows Trager's method [21]. Their meth- 
ods involve the computation of characteristic set, Grobner basis or resultant of 
multivariate polynomial system and these computations are quite expensive. All 
the above algorithms are probabilistic, and if the characteristic of the field is 0, 
the algorithms will terminate in a finite steps with probability 1 [8, 23]. Besides, 
A. Steel gave his factorization method in another way when the characteristic 
of the field is positive and he concentrated on how to conquer the inseparability 
[20]. 
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In this paper, we will present a new algorithm to solve the following factor- 
ization problem: 

Let A; be a perfect computable field and k[xi, - ■ ■ , x„] be the polynomial ring 
in indeterminate • • • ,a;„ with coefficients in k. Let / C k[xi, ■ ■ ■ ,Xn] be a 
maximal ideal such that K = k[xi, - ■ ■ ,Xn]/I is indeed an algebraic extension 
field of k. For a polynomial / S K[y] , we will derive a new algorithm for factoring 
this polynomial over the field K. 

If / is represented by its Grobner basis for any monomial order, we will 
deduce the above problem to univariate polynomial factorization over the base 
field k by using linear map. No extra Grobner basis computation is needed in 
our computation. 

In [19], Monico proposed a new approach for computing the primary decom- 
position of an zero dimensional ideal. This idea also plays an important role in 
our algorithm. We should notice that Monico's algorithm is not complete, i.e. 
the components in the output of Monico's algorithm can not be assured to be 
primary. However, our algorithm is complete when applying Monico's idea to 
the above factorization problem. 

Some preliminaries will be given in section 2. In section 3, we will show how 
the problem of polynomial factorization over algebraic extension field, which is 
proposed in [22, 23, 25, 26], can be deduced to a univariate factorization prob- 
lem. In section 4, we will present two algorithms for factoring polynomials over 
algebraic extension field. Examples and comparisons will appear in section 5 
and section 6 respectively. Finally, we will finish this paper with the conclusions. 



2 Preliminaries 

Let fc be a perfect field which admit efiicient operations and factorization of 
univariate polynomials. Let i? be a multivariate polynomial ring over the field 
k and I be an ideal of R. Set A = R/I , which is a quotient ring. 

Since we can add elements of A and multiply elements by constants, A has 
the structure of a vector space over the field k. So if / is a zero dimensional 
ideal, then ^ is a finite dimensional vector space. 

Given a polynomial r G R, we can use multiplication to define a linear map 
rur from A to itself. We define : A — > A by the rule: if [g] G A, then 

mr{[g]) = [r][g] = [rg] e A. 
Then m,. has the following basic properties. 
Proposition 2.1. Let r ^ R. Then we have 

(1) The m,ap rrir is a linear map from A to A. 

(2) We have rrir = rUg exactly when r — g € I. In particular, rrir is the zero 
map exactly when r G I. 
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(3) Let q he a univariate polynomial over k and r G R. Then rUqi^r) = Q{n^r)- 

(4) If Pr is the characteristic polynomial of rur, then Pr{r) G I. 

Proof. For the proof of part (1), (2) and (3), please see [4]. To prove part (4), 
since Pr is the characteristic polynomial of the linear map m^, Pr{m.r) = by 
Cayley-Hamilton Theorem. From part (3), it follows that mp^t^r) — Prirrir) = 0. 
Hence the polynomial Pr{r) must be in the ideal / by part (2). □ 

Proposition 2.2. Let R be a polynomial ring over k, and I a m,aximal ideal of 
R. For any given r G R, the minimal polynomial of m,r is irreducible over k. 

Proof. Assume that R is the polynomial ring k[xi, ■ ■ ■ , Xn]. Let (/, z — r) be the 
ideal generated by / and z — r over the polynomial ring k[xi, ■ ■ ■ , Xn, z], where 
2; is a new indeterminate. Since / is a maximal ideal in k[xi, • • ■ , a;„], it follows 
that (/, z — r) is also a maximal ideal in k[xi, - ■ ■ ,Xn,z], and so is the ideal 

(/, z-r)nfe[z]. 

To study the ideal (/, z — r) Ci k[z], let g be the generator of the principal 
prime ideal (/, z — r)r\k[z], and we notice that g is an irreducible polynomial over 
k. Now substituting the indeterminate z by r in g, then we have g{r) € /. By 
proposition 2.1, this implies g{mr) = mgi^r) = 0, which means g is the minimal 
polynomial of the linear map rUr- □ 

To illustrate the relationship between minimal polynomial and characteristic 
polynomial, we need the following proposition, which is a basic conclusion from 
standard linear algebra. 

Proposition 2.3. The minimal polynomial of and its characteristic poly- 
nomial have the same irreducible factors. 

Thus, we have an instant corollary of Proposition 2.2. 

Corollary 2.4. Let R be a polynomial ring over k, and I is a maximal ideal of 
R. Given r G R, the characteristic polynomial of mr is a power of a polynomial 
which is irreducible over k. 

Let i? be a polynomial ring over the field k, and let Q be a zero dimensional 
radical ideal of R. Assume that Q has a minimal prime decomposition: 

Q = Qin---nQt. 

where each Qi is a maximal ideal of R. 

Let r G R, and the linear map mr, which is already defined above, is from 
A = R/Q to A. Similarly, denote Ai = RjQi for i = 1, • • • , i, and consider the 
linear maps: m^.j : Ai —>■ Ai, for [g] G Ai, mr,i{[g]) = [r][g] = [rg] G Ai The 
following proposition shows the relationship between rUr and the mr/s. 

Proposition 2.5. With the notations as above, letpr,Pr,i be the characteristic 
polynomial of mr,mr^i respectively. Then we have 

Pr = Pr,l ■ ■ ■ Pr,t- 



3 



Proof. The following is a slight modification of the proof given by C. Monica. 
For the original proof of this proposition, please see [19]. 
Consider the map: 

6 : A ^ Ai X ■ ■ ■ X At 

[5] -([5], •••,[5])- 

We sec that S is an isomorphism map by Chinese Remainder Theorem. 

Notice that is a linear map from A to itself. Set = SmrS~^, and 
is a linear map from Ai x ■■■ x At to itself. Since 5 is an invertible linear 

map from A to Ai x ■■■ x At, the characteristic polynomials of and are 

identical. 

It is easy to check 

ml.{{9i],---Aai]) = i[rgi],---,[rgt]). 

In particular, for any (0, • • • , 0, [gi], 0, • • • , 0) G ^1 x • • • x At, one has 

m;(0,---,0,[ffi],0,---,0) = (0,---,0,[r5i],0,---,0) 

whence (0, • • • , A^, • • • , 0) is an m^-invariant subspace of Ai x ■ ■ ■ x At- 

Let Bi = • • • , bi^i-} be a basis of the vector space Ai, and let Mj-^i be 
the matrix of rrir^i relative to the basis Bi. Set 

S = {(6i,i,0,---,0),---,(6i,(,,0,---,0),---,(0,---,0,6t,i),---,(0,---,0,6t,zJ}. 

It is obvious that _B is a basis oi Ai x ■ ■ ■ x At. Therefore, the matrix of m^, 
denoted by M^, relative to the basis B has the form: 



\ Mr,t ) 

Let e fc[A] be the characteristic polynomial of M'^ or m^, and by the hypoth- 
esis, pr.i is the characteristic polynomial of mr,i, which is also the characteristic 
polynomial of M^^i. We can obtain 

V'r =Pr,l---Pr,t- 

Since rrir and are similar linear maps, then it holds that Pr =v'v Combined 
with our previous discussion, we have 

Vr = Pr,l ■ ■ ■Pr,t 

which is just what we need. 

□ 
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3 Factorization of Polynomials over Algebraic 
Extension Field 



In this section, we will discuss the main ideas about the factorization method. 
First of all, we need to define some new notations. Throughont this section, let 
Ri ~ k[xi, • • • , Xn] and R2 — k[xi, • • • , Xn, y]. Ii is a maximal ideal in i?i and I2 
is the ideal generated by Ii over the polynomial ring R2. Since /i is a maximal 
ideal, the quotient ring Ri/Ii is in fact a field and for convenience, we denote 
K = Ri/Ii, which is a finite extension field of k. Remark that the quotient 
R2/I2 is not a field, for I2 is not a zero dimensional ideal in R2 any more. 

The ring K[y], which is a polynomial ring over K with the indeterminate 
y, is a principal ideal domain and each polynomial / in K[2/] has a unique 
factorization over K. What we will do next is to give an efficient algorithm to 
calculate the factorization of polynomials in K[y]. 

In order to use the property of /i, we should connect the ring R2 and K[y]. 
Consider the canonical map: 

a:Ri — > K = Ri/h 

c^[c] 

which sends a polynomial c G i?i to [c] e K. And the map a can be easily 
extended onto R2 by applying a coefficientwise. Notice that, for any g G R2, 
wc have cr(.g) = if an only if g G I2 by the definition of a. 

Conversely, for an element c G K, we say a polynomial d S i?i is a lift of c, 
if it satisfies a{d) = c. Similarly, we say h G R2 is a. lift of g G K[y] if a{h) = g 
holds. It is obvious that an element c G K, as well as g G K[y], may have infinite 
distinct lifts, for the map a is not injcctive. Remark that, for g GK.[y], the lifts 
of g may have different degrees in the indeterminate y. 

Since K = k{ai, ■ • • , q;„) = k[ai, • • • , Q!„], any element in K can be written 
as an polynomial form in the letters ai, a2, - ■■ ,an- For g G K[y], g can be 
written as 

d 

i=0 

d 

where Ci{a) G k[ai, ■ • • , a„]. Let /i = ^ Ci{x)y^ where Ci{x) G k[xi, - ■ ■ ,Xr^, it 

i=0 

is easy to check that a{h) = g, and we call h a natural lift of g. 

Let F be a polynomial set in R2, the ideal generated by F over R2 is denoted 
by (F). 

The following proposition build a relation between the factorization of a 
squarefree polynomial and the minimal decomposition of a radical ideal. 

Proposition 3.1. Suppose that f is a squarefree polynomial in K[y], and f = 
/i • • • /t is an irreducible factorization of f over K. Let Q = {Ii,h),Qi = (/i, hi) 
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where h, hi are the lifts of f, fi respectively. Then Q is a radical ideal and it has 
a minimal prime decomposition 

Proof. First, we begin by showing that the definition of ideal Q = (/i, h) is well 
defined. That is, suppose h' is another lift of / in i?2, and then it suffice to show 
the two ideals Q ~ {Ii,h) and Q' = {Ii,h') arc identical. By the definition of 
lift, we have a{h) = f = a{h'). Since cr is a homomorphism map, it holds that 
a{h — h') = 0. It follows that h — h' G I2, and hence Q = Q'. And Qi's are also 
well defined for same reasons. 

Next, we will prove the ideal Q is a radical ideal of i?2- For any positive 
integer m, if € Q, then 5™ has an expression 5™ = sh + t, where s £ R2 and 
t G 12- Since cr is a homomorphism map, we see that 

^(5™) = a{gr = <T{s)aih) + a{t) = a{s)f 

which means /|cr(g)™. As we have assumed / is a squarcfrec polynomial, 
f\(7{g)'^ implies f\a(g). Let a{g) = bf and a be a lift of b, since h is a lift of /, 
it follows that <T{g) = a{a)a{h). This means a{g — ah) = 0, hence g — ah € I2 
and g G Q. Then Q is a radical ideal. 

Similarly, using the property that fi is irreducible over K, it is easy to show 
Qi is a prime ideal and the proof is omitted. 

Finally, wc will finish the proof by showing the Qj's constitute a minimal 
prime decomposition of Q. 

On one hand, for any g € Q, we have f\<T{g). It follows that fi\a-{g) for 
i = 1, • • • , t. Then g is in every Qi, and hence g is in the intersection of Q'^s. 

On the other hand, for any <? G Qi n • • • fl Qt, it is easy to see that fi\<j{g) 
for alH = 1, 2, • ■ • Since /j's are irreducible factors of / and coprime with 
each other, it follows that /1/2 ■ • • ftWig) and hence f\a{g), which means there 
exists a € i?2 such that g — ah € 12- Therefore, g & Q. 

We have proved that 

Q = Qin---nOf 

Since fi and fj are different factors of / for i ^ j, then hi G Qi is not in Qj 
and hj G Qj is not in Qi. This proves that the decomposition is minimal. 

□ 

In the rest of this paper, we always assume the following: Let h be a maximal 

ideal of Ri and K = Ri/Ii, K is an extension field of k. Let / be a squarefree 
polynomial in K[y] and hhea lift of /. Let Q ~ {Ii,h) C R2 and A = R2/Q. For 
r G i?2, the linear map rUr is defined from A to A as before. Let / = /i • • • /t be 
a factorization of / over K and hi be the lift of fi. Similarly, m^.i is defined from 
Ai to Ai where Ai = A/Qi and Qi = (/i, hi) for z = 1, • ■ • , i. Let Pr,Pr,i G k[X] 
be the characteristic polynomials of mr,mr^i respectively. 

Let 91,52 € K[y], the greatest common divisor of gi and 52 will be denoted 
by gcd(5i,52). 

The following theorem gives a method for factoring polynomials over alge- 
braic extension fields. 
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Theorem 3.2. If the characteristic polynomial Pr ofrrir is squarefree andpr = 
Qr,i ■ • ■Qr,s is an irreducible factorization of Pr over k, then 

s 

f = c'[[gcd{f,a{qr,i{r))) 

i=l 

where c is constant in K and each gcd{f,a{qr,i{r))) is irreducible over K. 

Proof. For conenience, we assume that / and g^.i are monic. In this case, c = 1. 
Since / has a factorization f = fi ■ ■ ■ f^. From proposition 3.1, Q = {Ii,h) is a 
radical ideal and Qi — (/i, /ij)'s are prime ideals. Furthermore, Q has a prime 
decomposition Q = Qi fl • • • flQ*. By proposition 2.5, we have Pr = Pr,i ■ • ■Pr,t- 
Now we claim that 

fi = gcd(/,a(pr,i(r))) 

for i = 1, - ■ ■ ,t. 

Since is the characteristic polynomial of m^^i and prj G fc[A], substituting 
A by the expression of r € R2, it follows that Pr,i{r) & Qi — {Ii,hi) by proposi- 
tion 2.1. That is, there exist a G R2 and b € I2, such that Pr,i{r) = ahi+b. Using 
the map a to both sides of the equality, we get a{pr,i{r)) = a{a)a{hi) + a{b) = 
(j{a)fi. So we have 

fi\<y{pr,i{r)) 

for i = 1, 2, • • • , 

Next, by the proposition 3.1, Qi is a prime ideal and it follows that pr^i is a 
power of an irreducible polynomial in A;[A] by corollary 2.4. But here, we have 
assumed Pr is a squarefree polynomial in the hypothesis, so all the Pr.i's are 
irreducible and co-prime with each other, which means for j ^ i, there exist 
a, 6 e fc[A], such that aprj+bprs = 1- Substituting A by the expression of r, the 
equality still holds a{r)prj{r) + b{r)prs{r) = 1. Applying the linear map a to 
both sides of the equation, and we have a{a{r))(j{pr,j{r)) + a{b{r))a{pr,i) = 1, 
which means cr{prj{r)) and a{pr,i{r)) are co-prime in K[y]. Therefore, if there 
exists some j for j ^ i such that fj\<j{Pr,i{r))- Then a{pr^i{r)) and (^{Pr,j{r)) 
have a common divisor fj since fj\<7{Pr,j {'>'))■ This contradiction shows that 

fj MPr,iir)) 

for j ^ i. 

Combined with the above two paragraphs, we finish the proof of our claim 
and we have 

t 

f = h---ft = l[gcd{f,a{pr,i{r))) 

i=l 

Since eachpr.i is irreducible in A;[A], the expression 
a factorization of Pr over k and is identical with Pr = qi 
which complete the proof. 



— Pr,i ■ ■ ■ Pr,t is actually 
■ • • 9s by a permutation, 

□ 
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We have an immediate corollary of the theorem. 

Corollary 3.3. Let f he a squarefree polynomial in K[y]. Let r he a polynomial 
in R2 and he the linear map defined as before. If the characteristic polynomial 
of rrir is irreducihle over k, then f is irreducihle over K. 

In addition, from the proof of the theorem, we obtain anotlier corollary. 

Corollary 3.4. // the characteristic polynomial Pr^i and Prj are co-prime for 
i ^ j, then we have 

fj /(cr{pr,i{r))andfi J(a{pr,j{r)) 

4 Algorithms for Factorization 

In this section, we will give the algorithms for factorization over algebraic ex- 
tension field based on the theorem 3.2. Before doing that, we should discuss 
some details in the algorithm. 

For a given polynomial / G K[y], it is usually not squarefree. So in order 
to apply our algorithm, we can factor the squarefree part of / first, and then 
deduce a factorization of /, which is not very difficult no matter the field K is 
characteristic or not. In our algorithm, the gcd computation over algebraic 
extension field is needed, and many algorithms have been proposed for this 
purpose[10, 14, 18]. 

In some cases, the characteristic polynomial of rrir may be not easy to com- 
pute, so we usually compute the minimal polynomial of instead, for we have 
the following observation. 

Proposition 4.1. If the characteristic polynomial ofrur is squarefree, then the 
minimal polynomial and the characteristic polynomial of rUr are the same. 

Proof. It is an easy inference of proposition 2.3. □ 

Conversely, if the minimal polynomial has lower degree than its characteristic 
polynomial, then the characteristic polynomial is not squarefree. 

Therefore, if the characteristic polynomial of nir, say Pr, is squarefree, we 
have three ways to obtain it: 

1 Construct a matrix of nir w.r.t. some basis in A and compute the char- 
acteristic polynomial of this matrix. 

2 Construct a matrix of rrir w.r.t. some basis in A and compute the minimal 
polynomial of this matrix. If the degree of the minimal polynomial is equal 
to the dimension of the vector space A, then it is actually the characteristic 
polynomial of m^. 

3 If the Grobner basis of Ji is known, we can use the fglm, algorithm to find 
the minimal polynomial of rrir [7] . If the degree of the minimal polynomial 
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is equal to the dimension of the vector space A, then it is actually the 
characteristic polynomial of rrir- In fact, the fglm algorithm here is to find 
the smallest number d, such that [1], [r], [r]^, • • • , [r]** is linear dependent 
in A. 

Our experiment data show the first approach is most efficient and easiest to be 
implemented. 

Now, we give the standard algorithm as follow: 

Algorithm 1: Standard Algorithm 

Input : /, a squarefree monic polynomial in K[y]; G, the Grobner basis 

of Ii C k[xi, ■■• ,Xn] 

Output: the factorization of / in K[y] 
begin 
repeat 

r < — a random polynomial in k[xi, Xn,y] 

Pr < — the characteristic polynomial of the linear map rUr 

until Pr is squarefree ; 

factor Pt and obtain p^ = Pr,i ' ' 'Pr,t 

for i < — 1 to t do 

Qi < — substitute A in the polynomial Pr,i by the expression of r 
< — gcd(/,f7(gi)) 

end 

return /i/2---/t 
end 



Remark: If f is monic, the Grobner basis of Q can be constructed directly 
from the Grobner basis of h and f, which will speed up our algorithm. That is, 
if h is a nature lift of f , then the set {h,G} is a Grobner basis for Q = (ft., /i) 
with the elimination monomial order y > x, where G is a Grobner basis for Ii. 

Up to now, we still have a question. That is, can we guarantee the charac- 
teristic polynomial pr of is squarefree for a random chosen r € R2 The 
following proposition gives an answer. 

Proposition 4.2. // the characteristic of k is 0, then the probability that the 
characteristic polynomial Pr ofnir is squarefree for a random r £ R2 is 1. 

Proof. The technique of the proof draws lessons from [19]. 

Since Q = (/i , h) is a zero dimensional radical ideal, the quotient ring A = 
R2/Q has finite dimension as a vector space. Define d = dim{A), and by the 
basic algebraic geometry, we know the variety V{Q) has d points counted with 
multiplicity, say zi, • • • , z^, in an extension field of k. Since Q is a radical ideal, 
then all the z^'s are distinct each other. 

We claim that Pr e k[X] is squarefree if and only if r(zj) ^ r{zj) for all i ^ j. 
Notice that, by definition r is a polynomial in R2, and here, r is considered as 
a polynomial function. 

Since Pr{r) = 0, it follows that Pr{r{zi)) = 0,i = 1, 2, • • • , d, which implies 
r{zi) is a root of Pr- Hence, Pr is squarefree if and only if the the roots of Pr is 
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different from each other, which is equivalent to r{zi) ^ r{zj) for all i j and 
we complete the claim. 

To finish our proof, consider the set: 

C = {r\pr is not squarefree} 

and we wish to show it identifies with an algebraic set. By the claim, the set 
has an equivalent expression 

C = {r|3zi, Zj € V{Q) with Zi ^ Zj such that r{zi) = r{zj)} 

Since V{Q) only has finite points, it sufiices to show for some fixed Zi, Zj with 
Zi ^ Zj, the set 

dj = {r\r{zi) = r{zj)} 

is an algebraic set. 

Let ei, • • • ,e<j be the standard monomial basis of A, and for convenience, 
we can always assume that ei = [1]. Otherwise, [1] is a linear combination 
the standard monomial basis of A. Thus, the polynomial function r has an 

expression r = a\e\ H h 0^6^, where ai & k,i = 1- ■ ■ d and the set has an 

equivalent form 

Cij = {(ai, • • • , Od) G k'^\aiei{zi) H h aded{zi) = aiei{zj) H h adCdizj)} 

or 

Cij = {{ai,---,ad) e k'''\ai{ei{zi) - ei{zj)) H \- ad{ed{zi) - ed{zj)) = 0} 

Notice, ei{zi) = 1^0 and hence {ei{zi), - ■ ■ ,ed{zi)) is not a zero vector. 
Furthermore, the vector (ei{zi), ■ ■ ■ , ed{zi)) is actually an eigenvector for 
with r{zi) as the eigenvalue [4]. Since different eigenvalues correspond to differ- 
ent eigenvectors and r{zi) ^ 'r'{zj), it follows that 

(ei(zi), • • ■,ed(zi)) ^ (ei(zj), • • ■,ed(zj)) 

and hence {ei{zi) — ei{zj), • • • , ed{zi) — ed{zj)) is a nonzero vector. 

Therefore, the set Cij is indeed an algebraic set, which is proper in k'^ and so 
does the set Cij. Since C is the union of all the Cij for i j, C is an algebraic 
set and is proper in k'^ as well. That is, the dimension of C is strictly smaller 
than d. Since the characteristic of k is 0, it follows that the probability that a 
random r G R2 belongs to the set C is 0, which completes our proof. 

□ 

Corollary 4.3. If the characteristic of k is 0, then we can find an r € R2 such 
that Pr is squarefree in finite steps. 

Proof. In fact, from the proof of proposition 4.2, the set C is equivalent to 
the solution set of a polynomial equation F{xi, - ■ ■ ,Xn) = 0. Suppose di = 
degxiF{xi, • • • , a;„), i = 1, - ■ ■ ,n, and then we can select r in this way. First we 
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choose r from the set D ~ \r\r = c\X\ + • • • + CnXm ci = 1, • • • , rf^, i = n}. 
Notice D is & finite set, so if there is an r G -D such that Pr is squarefree, then 

the proof is over; otherwise, r = {di + l)xi H h + l)x„ is the r we needed, 

since F{xi, ■ ■ ■ is not a polynomial. If wc use the conception of linear 
independent, the proof will be simpler, for the set Cij is a proper algebraic set 
in fc"^, which means the linear dimension of Cij is strictly smaller than d. So if 
all the r's wc selected are linear independent, then the procedure will finish in 
at most d steps. □ 

Corollary 4.4. // the characteristic of k is 0, then the probability that the 
characteristic polynomial Pr of is squarefree for a random linear r G R2 is 
also 1. 

Proof. The proof is almost the same as proposition 4.2. The mere difference 
is that here r have an expression r = by + aiXi + • • • + a„x„. Then the set 
Cij = {r\r{zi) = r{zj)} is isomorphic to an algebraic set of A;"+^, since Zi Zj, 
which will complete the proof. □ 

Therefore, in order to simplify the computation, we usually prefer r in a 
linear form. And there are also some tricks for choosing a linear r such that the 
algorithm will be more efficient. For example, the variable y needs to appear 
in the expression of r and we usually set the coefficient of y to be 1; also, if 
the variable Xi happens to be a leading monomial of some polynomial in the 
Grobner basis of Ji , then this variable Xi is not needed in r, for it can be reduced 
further. 

Although for almost all r, r is 'good', i.e. the characteristic polynomial Pr 
of rrir is squarefree, r may be 'bad' sometimes, i.e. Pr may not be squarefree. 
In the standard algorithm, if r is 'bad', we will choose another r and try again. 
However, it seems a waste to discard the 'bad' r, for we have done some com- 
putation on it. In fact, a 'bad' r will not deduce a complete factorization but a 
partial one. 

Proposition 4.5. If the characteristic polynomial Pr has a factorization 

Pr — Pr,l Pr,s 

Then GCD{f,a{pr,i{r))) is a factor of f, and furthermore, if mi = 1, then 
GCD{f,a{pr,i{r))) is an irreducible factor of f overK. 

Proof. It is a simple application of the corollary 3.4 and we omit the proof 
here. □ 

Based on the proposition above, we obtain an improved algorithm. 
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Algorithm 2: Improved Algorithm 
Input : /, a squarcfrcc monic polynomial in K[y]; GB, the Grobner 

basis of /i C k[xi, - ■ ■ , Xn] 
Output: the factorization of / in K[y] 
begin 

r < — a random polynomial in k[xi, ■ ■ • , Xn,y] 

Pr < — the characteristic polynomial of the linear map 

factor Pr and obtain p^ = p^l • • ■ p^l 

for i < — 1 to i do 

Qi < — substitute A in the polynomial Pr,i by the expression of r 

fi < — gcd(/, cr(gi)) 

if mi 7^ 1 then 

gi < — ImprovedAlgorithm{fi, GB), where gi is a product of 
irreducible factors of /» 
else gi < — fi 
end 

return gig2---gt 
end 



Now we will say something about the complexity of the algorithm: Given a 
Grobner basis GB for Ji and the set {h, GB} is a Grobner basis for Q = {h, h) 
as we discussed before, so computing a basis for A/Q has complexity 0{n). 
Computing the matrix of rrir requires O(n^) field operations in the worst case. 
Computing the characteristic polynomial Pr requires O(n^) field operations. 
Factoring the univariate polynomial Pr has been studied by many researchers, 
and more details can be found in [3, 15]. As a result, the problem of factoring 
polynomials over algebraic extension field can be transformed to the problem 
of factoring univariate polynomials over the base field by our algorithm in a 
polynomial time. 

5 Examples 

In this section, we will illustrate our algorithm through two complete examples. 

Example 5.1. Consider the maximal ideal Ii = {xf + l,X2 + a;i) C Q[a;i,a;2], 
where Q is the rational field and the extension field is defined asK = Q[xi,X2]/Ii ■ 
Notice that {xl + l,X2 + xi} is already a Grobner basis of It for the lexicographic 
order X2 > Xi. 

Now we are going to factor the polynomial 

f = y^ + (aia2 - 2ai - 02)2/^ + (aia2 + 2a2 - 2)y + ai - a\a2 G K[y] 
where ai = [x,] G K . 

Since / is squarefree and monic in K[t/], 
h = y^ ^ {x\X2 - 2x1 - x-2)y^ + {x\X2 + 2x2 - 2)i/ + - x\X2 G Ri 
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is a natural lift of /, and besides, {xf + 1,X2 + xi, h} is a Grobner basis of the 
ideal Q = {Ii,h), which is generated over the polynomial ring Q[xi,X2,y], for 
the monomial order y > X2 > xi. 

By our algorithm, first, wc should choose a random polynomial r G i?2 = 
Q[xi,X2,y] and here we select r = xi + 2x2 + y- Let A = Q[xi,X2, y]/Q and it 
is obviously a vector space over Q with a monomial basis 

B = [l,x2,xi,xiX2,y, X2y, xiy, xiX2y, .T2y^, xiy^ ,xiX2y'^]^ 

Next, we compute the matrix M of the linear map m^. with respect to B. 

mr{B) = MB 

and M is a 12 X 12 matrix 



M = 






2 


1 





1 































-2 


1 





1 






















-1 








2 








1 



















2 


-1 

















1 































2 


1 





1 































-2 


1 





1 






















-1 








2 








1 



















2 


-1 

















1 










-1 


1 


2 


-2 





-1 





3 


3 


-1 




1 








-1 


-1 


2 


2 





-1 





-3 


3 




1 


-1 











1 


2 


-2 


-3 


1 





3 







1 


1 





-2 





-1 


2 


3 


-3 


-1 





J 



For this matrix, its characteristic polynomial and minimal polynomial are iden- 
tical, and pr = + 26Ai° - IIGA^ + 371X^ - 2064A^ + 6802X^ - ITQieA^ + 
49922A4- 109088A3 + 155984A2- 134592A + 55872. Fortunately, Pr is squarefree 
and then factoring Pr, which is not difficult as Pr is a univariate polynomial, we 
get three irreducible factors 

= A'' + lOA^ - 12A + 18 

p^ 2 = A^ + 8A2 - 72A + 97 

3 = A"^ + 8A2 - 32A + 32 

Using these factors, the next step of algorithm is to substitute A by the 
expression of r. For instance, becomes 

Pr,i{r) = {xi + 2x2 + yf + 10(a;i + 2x2 + yf - 12(a;i + 2x2 + y) + 18 

Notice Pr,i{i') is in Q[a;i,a;2,y] and using the map a, we get 

^{Pr,i{r)) = (ai + 2q!2 + 1/)^ + 10(ai + 2a2 + yf - 12(ai + 2a2 + y) + 18 e K[y] 
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In the following, wc compute the gcd of / and cr(pr.i (''')), which can be easily 
done by a modified Euclidean algorithm. Finally, we have 

gcd(/, a{pr,i {r))) = y + aia2 

which is an irreducible factor of / e K[y]. Similarly, we can get the other factors 
from pr,2 and Pr^3 and they are 

gcd(/, a{pr,2{r))) = y-ai-a2 

and 

gcd(/, (7{pr,3{r))) = y-ai 
As a result, we obtain a complete factorization of / € K[y] 

f ={y + ai(^2){y - ai - a2){y - ai) 

Now, we see that r = Xi + 2x2 + y is a 'good' r, for it makes the characteristic 
polynomial Pr squarefree, and hence, we can obtain a complete factorization of 
/. However, if we are not so lucky, and select a 'bad' r, so what will happen 
then? 

For example, if we choose r = — |a;i — ^X2 + y, then we repeat the above 
steps. 

The monomial basis does not change, but the matrix varies and the charac- 
teristic polynomial of M becomes Pr = + 1 - + ^I^A^ - |A'^ + ^A'^ + 
« A"^ + + gA^ + A^ + i§A + 1^, which is not squarefree, and has a 

factorization 

,, = (A. + 5A^-|A+f)(V + lA' + lA+i)^ 

Now, we can not work as before any more and have two choices. The first 

one is to choose another r and try again, which is what the standard algorithm 
does; the other one is to get a partial factorization and do another factoriza- 
tion further, which is what the improved algorithm does. Here, we prefer the 
improved algorithm. 

The factor p^.i = A* -|- |A^ ~ fA + ^ has multiple one, so we can get an 
irreducible factor of / by the proposition 4.5 

gcd{f,a{pr,-i{r))) = y + axa2 

While the other factor pr,2 — (A^ -I- ^A^ -I- ^A -I- can only lead to a reducible 
factor of / 

gcd(/, a{pr,2{r))) =y^ - (2ai -h a2)y -h Qia2 - 1 

which needs to be factored further. 

Let f = — (2ai -|- a2)y + aia2 — 1 and we choose r = —2xi — 2x2 + y 
and repeat the procedures, h = y^ — {2xi + X2)y + x\X2 — 1 e ii2 is a natural 
lift of /' and the monomial basis of {I\ , h) is 

B = [l,x2,xi,xiX2,y,yx2,yxi,yxiX2f 
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Notice the length of B is 8 and smaUcr than the previous one, thus wc can get 
an 8 X 8 matrix, the characteristic polynomial of which is Pr = + 4A^ + 20A° + 
23A^ + 40A^ + 102A2 + lOOA + 34. It has a factorization: 

Pr = Pr,iPra = (A^ + 2X^ + 16A + 17)(A'' + 2A2 + 4A + 2) 

The characteristic polynomial is square-free now and after computing the 
gcd, we obtain two irreducible factors of /': 

gcd(/',cr(pr,i(^))) = y-ai 

gcd(/', a{pr,2{r))) = y-ai-a2 

Combined with the factor we obtained earlier, we have got a complete factor- 
ization: 

f = {y + aia2){y - ai){y - ai - 0:2) 

Remark that compared with choosing another r, the improved algorithm is 
faster, and the further factorization costs less resource as the polynomial /' has 
lower degree than / and the corresponding matrix is smaller too. 

After a slight modification, our algorithm, particularly the improved one, 
can also perform very well when the field A; is a finite field. 

Example 5.2. Let k = F31, h = {x\ + 5,a;| + xi) C F3i[a;i, ^2], and K = 

^3i[xi,X2\/ Ii- The polynomial we want to factor is 

f = y^ + 2a2 - aia2)y^ + (5a2 + 2aia2 - 2alai)y + lOal G K[y] 
where a, = [xi] G K for i = 1,2. 

First, let h be the natural lift of /, and Let A = R2/Q, Q = {Ii, h). Second, 
choose a polynomial r G R2 randomly. Here we select r = —Xi + X2 +y, while 
the corresponding characteristic polynomial of rrir with respect to the standard 
monomial basis of ^ is = A^^ + 28X^^ + 20\^'^ + 9\^^ + 22X^^ + 19X^^ + 24A" + 
5A^° + llA^ + 22A« + 6A^ + llA^ + ISA^ + 23A3 + 24A2 + 20A + 28, which has a 
factorization over F31 . 

p^ = (A^ + 15A^+14A2-6)(AS + 15A^-11A3-4A2 + 10A+14)(AS-2A''-11A2 + 10) 

Since Pr is squarefree, we can immediately obtain a complete factorization 
of / by computing the gcd: 

f = {y + 2a2){y - a-ia2){y + ax) 

However, we should notice that if we consider the factorization in a finite 
field k, from the proof of proposition 4.2, we will have a lower probability to 
meet a 'good' r, especially when the cardinality of k is small. In this case, we 
recommend to use the improved algorithm, which will deal with the problem 
more efficiently. 



15 



6 Timings 

We have implemented our algorithm both for the case k = Q and for finite fields 
in Magma. Since Wang's algorithm can only work for fields of characteristic 
0. In order to compare our algorithm with Wang's algorithm, the following 
examples are randomly generated and the base field fc = Q. 

1- fi = iy + - 2a2)(2/^ + ai + 02) 

h = {xi + xl,l + xl - X2X1) C Q[a;i, a;2] 

2. /2 = {y + aias + a2 + ai){y - 2al + al + + aia2 + as) 

h = ixl-X2Xi+xsXi~xi-X2, xl ~ xsxi + xi - X2 - X3X2 - X2 + xl, -1 + 
x\ + X3X1 + xi - x\ - X2 + x\ - .T3) C Q[xi, a;2, xs] 

3- /s = (2/ + ai)(y - 2a4)(2/ + "2 + as) 

/a = (xf +X3X1 — X1X4+X2 — X2+X3X4 — X4 — X4,Xi+X2Xi — X1X4 + X2 + 

a;3a;2 +2^2 +x| — X4, 1 +X2X1 -X3X1 +X1X4 + xi +X2 -X3X2 +X2X4 -X2 +x| + 

X3X4 — X4 , xf + X2X1 + X3X1 + X1X4 — x| + X3X2 — X2 + X§ — X3X4 — X4 + X4) C 
Q[xi,X2,X3,X4] 

4- /4 = (y - 2q:| + aza\ + 0:2 + + + 030:4 + 0103 + 2) 

/4 = (-l-Xi+X3Xi+x|— X3X2+XI-X3X4 + X4 + X4, I+X2X1+X3X1+X1 — 
X3X2 -X2X4 + X2 -X3 -X3X4 -X3, I + X3X1 +X1X4 + X1 +X2 +X2X4 -X2 - 
X3 - X4, xf + X2X1 + X3X1 + X1X4 - Xi - X2X4 - X3 + X3X4 - X3 + X4 + X4) C 
Q[xi,X2,X3,X4] 

5- /s = (y^ + (oi + 0402)2; + 03O4 + 02)(?/ + (oiq;3 - a/^)y + 03 + 020401) 
J5 = (— 1 + 2x\ — X2X1 + 2x3X1 — X1X4 + X2 + X2X3 + 2x2X4 — 2x3 + 2x3X4 — 
X3 — X4, x^ — 2x1X4 — xi + 2x|+X2X3 + 2x2X4 — X2 —X3X4+X3 —2x| + 2x4, 2 — 
2X1+2X2X1+X3X1+2X1+2X2X3+X2X4 — x§ — 2x3 — 2x4, 2xf — X2X1— X3X1 — 
X1X4-X2+X2X3— X2X4-2x2+2x§-2x3X4+X3+X4+2x4) C Q[a;i, X2, X3, X4] 

6- /e = (2/ + oi + 0304 + 0205)(2/ + 0205 + 2-03+04) 

/e = (2 — xf + X1X2 — 2x3X1 + 2x4X1 — 2xi + 2x| + X2X3 + 2x2X5 + 2x§ + 

X3X4 — X3 — 2X4X5 — 2X4 + 2X5 ,1— xf — X1X2 — X3X1— X1X5+X1— x| — 2x2X3 + 

2x2X4 — 2x2X5 +X2 +X3 +2x3X4 — X3 — 2x| — X4X5 +X4 +2x| , 1 — 2x^ — 2xiX2 — 

2X3X1— X4X1—X1X5 +X2 + 2X2X3— 2X2X4 +X2X5— 2x2— x§ — 2x3X4 +2x3X5 — 
2X3 — 2X4 + X4X5 + 2x| + X5 , Xi — X1X2 — X3X1 — X4X1 + 2xi + 2X2 + X2X-3 + 
2X2 + 2X3X5 + X4 - X4 + 2X5 -X5,X2 - 2X4 +X5 - 1) C Q[xi,X2,X3,X4,X5] 

7- !l = iy + 01+ 0304)(2/ - 0205)(y - 03 + 04) 

Ir = (1 — 2X3X1+X4X1+2X1X5+X1 — 2x|— X2X3+2X2X4+2X2X5 — 2x2— Xg — 
2x3X4 + 2x3X5 + X3 + X4 + 2x4X5 + X4 — Xg — 2x5, 1 — 2xf + 2xiX2 — 2x3X1 — 

2x4X1 + 2xi X5 — 2xi +X2 + 2x2X3 +X2X4 + 2x2X5 — 2x2 + 2x3 — X3X4 +2x3X5 + 
2x3 + 2x4 — X4X5 — 2x| + X5 , —x\ — X1X2 — X3X1 + X4X1 — 2x1X5 + 2xi — X2 + 

2X2X3 — X2X4 + 2X2X5 + 2X2 — 2X3 + 2X3X4 — X3X5—X3—X4+2X4X5 + 2X4 — 2x5 + 

2x5, - l-2xf +2X1X2-X3X1-X4X1+X1X5+X1 + 2X2X3+X2X4+X2X5+2X2 + 

X3X4 + X3 - 2X4 - X4 + X5 - X5 , X2 - X3 + X4 - X5 + 1) C Q[Xi , X2 , X3 , X4, X5] 
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8- /s = (y^ + ("1 - "2^4)2/ + ^205 + as + ct^){v + aatts + a2aiaz) 

1% = {2 + x\+ 2xiX\ + ccsxi + 2x1X4 — 2x1X5 + 2xi — x| + 2x3X2 + 2x4X2 + 
2x2X5 — X2 — 2x3X4 + X3X5 + X3 — x| — X4X5 — X4 + x| — 2x5 , 1 — xf + 2x2X1 — 

X3X1 + 2x1X4 + 2x1X5 — 2xi + 2x2 ^ 2:3X2 — X4X2 — X2X5 + 2x2 + 2x| — 2x3X4 + 

2X3X5 — 2X4 + 2X4X5 — X4 — X5 + X5, 1 + 2X2X1 + X3X1 + X1X4 + 2x1X5 + x| + 
X4X2 — 2X2X5 — X3 + X3X4 — X3X5 — X3 + X4X5 — X4 + X5 — X5, xf + 2x2X1 + 

2x3X1 + 2x1X4 + X1X5 — 2xi + 2x2 + •^32^2 + 2x4X2 — 2x2 — 2x§ + 2x3X4 — 
2x3 ~ 2x| — X4X5 +Xg, xi — 2x2 — 2x3 + 2x4 + 2:5 — 2) C Q[xi, X2, X3, X4, X5] 

9- /g = {y^ + ("1 - C(2a4)y + 0:20:5 +03 + 05) (y^ + y{l + 03 - 02 + 0305) + 
04 + 03- o-i05){y + 0305 + 020403) 

/g = /g C Q[xi,X2,X3,X4,X5] 

10. fio = {y + ai+a2 + ae + 030:4 + a2Q!5Q!6)(y + 0206 — 0105 + 2 - 03 + 04) 
Jio = (— 1 + 2xi + X1X2 + 2x1X3 — X1X4 + X1X5 — 2xiX6 + 2xi — X2 + X3X2 + 
2x4X2 — 2x2 + — 2x3X5 + 2x3X6 — 2x| — X4X5 + 2x4X6 + X4 — 2x5X6 — 2x5 + 
X6+2x6, — 2xf — X1X5 — 2xi — 2x2+X3:r2 —:r4X2—X2X6—x§ +2x4X3 +2x3X5 — 
X3 + 2x| - 2X4 — xl— X5X6 + X5 + 2X6, -1 + 2:4 - 3^5 + ■2^6 + X^Xf, - 2x4X6 + 
2x4X5 — 2x3X6 +X3X5 + X4X3 — X2X6 + 2x2X5 + X3X2 — xiXg — X1X5 — 2x1X4 — 
X1X3 — X1X2 + 2x2 — 2xi +x| + 2x| — X4 +X5 +x|, 2 — Xi — 2x1X3 — 2x1X4 — 
2x1X5 + xi xe + xi - X3X2 + 2x4X2 - 2x2X6 - X2 + 2x3 - X4X3 + 2x3X5 + X3X6 + 
2:3 +2:4 + X4X5 — X4- 2x5 + 2x5X6 + X5 — X6, X1X2- 2x1X4 -X1X5 -X1X6-X1 - 
X3X2 — 2x4X2 — 2x2X5 — 2x2X6 — 2;| — X4X3 — 2.r3.T5 — 2x3X5 — X3 — 2x4X5 — 

2X4X6 — 2X4 — X| + 2X5X6—X5 + 2X6+X6, — 2xi +X2 +X3 — 2X4 + 2X5+X6 — 2) C 

Q[xi,X2,X3,X4,X5,X6] 

We have tested the above examples both for cfactor, which is an implemen- 
tation of Wang's algorithm and for efactor which is an implementation of our 
algorithm. The timings in the following table are obtained from a computer ( 
Windows XP, CPU Core2 Duo 2.66GHz, Memory 2GB). 

We should notice that cfactor is implemented in Maple 7, since cfactor only 
can work correctly for Maple 7, and efactor is implemented in Magma. For the 
input of our algorithm, the maximal ideal can be expressed by its Grobner basis 
for any monomial order, generally for a total degree order. And for the input of 
Wang's algorithm, the maximal ideal is expressed by the irreducible ascending 
set, which is a lexicographic Grobner basis. We should notice that a Grobner 
basis with lexicographic order usually has larger coefficients than that with a 
total degree order. 

In the third column of table 1, /i^ is a lift of /j. From this table, we can see 
that our algorithm is much more efficient than Wang's, especially for compli- 
cated examples. 

By analyzing Wang's algorithm and our algorithm, wc think there are the 
following three main reasons which makes our algoritlini more efficient than 
Wang's. First, in Wang's algorithm, the variable of y in /, which is to be 
factored, will be replace by a linear combination of a new variable y' and the Xi 's. 
This will lead expansions of the coefficients and the terms of / while the degree 
of / in y is big. Second, the modulo map, which maps a polynomial into its 
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i?2 


dimkR2/{Ii, hi) 


efactor 


efactor 


/l 




16 


0.032 


0.000 


.[■2 


Q[.i-l..i-2..r:s. (/] 


2<S 


0.110 


().0:-!l 


h 


Q[a:;i,a;2,a;3,a:;4, J/] 


48 


12.171 


0.734 


h 


^.[xi,X2,xz,Xi,y\ 


32 


9.109 


0.328 


h 


Q[xi,a;2,a;3,X4,y] 


64 


245.531 


4.313 


h 


Q[xi,X2,xz,Xi,X5,y] 


32 


44.359 


1.297 


fr 


'Q[xi,X2,X2„XA,xz,y\ 


48 


91.500 


9.719 


fs 


<Q[xi,X2,Xz,Xi,X5,y] 


48 


377.327 


11.469 


h 


Q[a;i,a;2,a;3,a;4,a;5,y] 


80 


2011.375 


63.578 


/lO 


Q[xi,X2,Xi,Xi,X5,XQ,y\ 


64 


> 2h 


96.344 



Table 1: Compared with Wang's Algorithm. 



remainder, is a ring homomorphism, which can speed up our algorithm. But in 
Wang's algorithm, the psudo-remainder map does not hold this property. Last, 
and the most important, for a polynomial r, the complexity of computing the 
characteristic polynomial of nir is polynomial time. However, the complexity 
of computing the characteristic set in Wang's algorithm is exponential time. 
Besides, any new technique for computing the characteristic polynomial will 
speed up our algorithm. 

7 Conclusions and Future Works 

In this paper, we present a new method for factoring polynomials over algebraic 
extension field and this algorithm can perform pretty good for characteristic 
systems as well as for finite field systems. The standard algorithm seems to be 
a probabilistic algorithm and relies on the selection of the linear map, while the 
improved one lighten the dependence and is suitable for almost all systems, thus 
the improved algorithm is more stable and efficient, and furthermore, the total 
complexity can also be controlled in a reasonable degree. 

However, when the characteristic is 0, the expansion of coefficients is un- 
avoidable, and the situation will be better in finite field. Therefore, a natural 
idea emerges, and that is we can factor the polynomials in finite field first, 
and then lift the factorization to characteristic 0, which will be done in a fu- 
ture paper. We also notice that Gao gives an efficient algorithm for computing 
the primary decomposition in finite field [9], which may help to improve our 
algorithm in the finite field and then benefits for our future work. 
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